Repository navigation
chore: sync actions from gh-aw@v0.91.6 - #262
Merged
Merged
Conversation
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
Unresolved input-safety, runtime correctness, and API-budget issues need fixes before approval.
4 open findings
What changed in this PR
Syncs shared GitHub Actions runtime code from gh-aw@v0.91.6.
Changes:
- Expands work-queue authentication, claim isolation, and delivery verification.
- Adds model-routing and subagent support across engine runtimes and session reporting.
- Updates safe-output validation, memory handling, dependencies, and artifact setup.
| File | Description |
|---|---|
setup/sh/cloud_hypervisor_setup_enclave_artifacts.sh |
Verifies and installs enclave artifacts. |
setup/setup.sh |
Updates deployed runtime dependencies. |
setup/session_parsers.go |
Expands embedded parser dependencies. |
setup/js/write_work_queue_snapshot.cjs |
Writes authenticated version-3 queue snapshots. |
setup/js/work_queue_test_helpers.cjs |
Adds queue test fixtures. |
setup/js/work_queue_script_preparation_checks.cjs |
Checks isolated script preparation. |
setup/js/work_queue_scaling_checks.cjs |
Checks queue scaling and isolation. |
setup/js/work_queue_provisioning.cjs |
Verifies approved worker routes. |
setup/js/work_queue_prepare_claim_script.cjs |
Executes claim payload preparation. |
setup/js/work_queue_prepare_claim_adapter.cjs |
Prepares claim-scoped adapter inputs. |
setup/js/work_queue_limits.cjs |
Enforces queue resource budgets. |
setup/js/work_queue_indexes.cjs |
Adds derived scheduling indexes. |
setup/js/work_queue_git_effects.cjs |
Authorizes claim-scoped Git pushes. |
setup/js/work_queue_effect_test_helpers.cjs |
Adds temporary-directory test helpers. |
setup/js/work_queue_effect_resource.cjs |
Resolves native effect identities. |
setup/js/work_queue_dispatch_credential.cjs |
Binds dispatch credentials to clients. |
setup/js/work_queue_declared_verification.cjs |
Defines declared effect verification. |
setup/js/work_queue_control_delivery.cjs |
Reads claim-scoped control intents. |
setup/js/work_queue_collector_missing_checks.cjs |
Checks missing-output behavior. |
setup/js/work_queue_codemods.cjs |
Removes legacy transaction upgrades. |
setup/js/unified_session.cjs |
Registers the Agy parser. |
setup/js/unified_session_render.cjs |
Separates nested session rendering. |
setup/js/unified_session_payload.cjs |
Preserves session and message metadata. |
setup/js/types/work-queue-native-client.d.ts |
Defines native claim client types. |
setup/js/types/unified_session.d.ts |
Expands unified event types. |
setup/js/types/github-script.type-test.ts |
Checks global type constraints. |
setup/js/types/github-script.d.ts |
Strengthens runtime global types. |
setup/js/types/agent_session.d.ts |
Adds effort and accounting fields. |
setup/js/subagent_session_render.cjs |
Renders per-agent accounting summaries. |
setup/js/shim.cjs |
Expands typed runtime shims. |
setup/js/setup_globals.cjs |
Removes obsolete type suppressions. |
setup/js/scripts/work_queue_yaml/package.json |
Pins YAML bundling dependencies. |
setup/js/scripts/work_queue_yaml/entry.mjs |
Exports the YAML parser entry. |
setup/js/scripts/work_queue_yaml/build.mjs |
Builds a self-contained YAML parser. |
setup/js/safe_outputs_tools.json |
Updates safe-output schemas and guidance. |
setup/js/safe_outputs_mcp_arguments.cjs |
Normalizes blank optional arguments. |
setup/js/safe_outputs_append.cjs |
Normalizes claim scope before append. |
setup/js/safe_output_type_validator.cjs |
Refines blank-field validation. |
setup/js/safe_output_processor.cjs |
Authorizes claim-scoped outputs. |
setup/js/safe_output_action_handler.cjs |
Isolates custom action claim context. |
setup/js/restore_aic_scan_cache.cjs |
Adds repository-history restore fallback. |
setup/js/redact_secrets.cjs |
Handles read-only parent directories. |
setup/js/push_to_pull_request_branch.cjs |
Authorizes additional push paths. |
setup/js/push_signed_commits.cjs |
Adds push authorization and probe credentials. |
setup/js/push_repo_memory.cjs |
Preserves unmanaged files and retry credentials. |
setup/js/pi_tool_policy.cjs |
Shares tool budgets across processes. |
setup/js/pi_subagent_config.cjs |
Validates subagent definitions and models. |
setup/js/pi_steering_extension.cjs |
Limits steering to tool-use turns. |
setup/js/pi_session.cjs |
Captures Pi subagent events. |
setup/js/pi_runtime.cjs |
Stages artifacts and applies routing settings. |
setup/js/pi_rpc_driver.cjs |
Integrates routing and subagent extensions. |
setup/js/pi_agent_core_driver.cjs |
Integrates routing and subagent extensions. |
setup/js/parse_mcp_gateway_log.cjs |
Removes legacy timeline summary output. |
setup/js/parse_custom_log.cjs |
Detects Agy log format. |
setup/js/parse_claude_log.cjs |
Separates nested-session result handling. |
setup/js/package.json |
Updates dependency pins and overrides. |
setup/js/optional_field_normalizer.cjs |
Centralizes optional blank-field handling. |
setup/js/models.json |
Updates model pricing data. |
setup/js/memory_custom_validation.cjs |
Filters validation copies by eligibility. |
setup/js/mcp_scripts_validation.cjs |
Enforces required fields within alternatives. |
setup/js/mcp_cli_bridge.cjs |
Normalizes blank safe-output CLI arguments. |
setup/js/log_parser_shared.cjs |
Scopes tool correlation by session. |
setup/js/log_parser_format.cjs |
Adds nested conversations and subagent summaries. |
setup/js/load_agent_output.cjs |
Partitions and validates claim-scoped output. |
setup/js/install_frontmatter_skills.cjs |
Simplifies skill summary markup. |
setup/js/inline_artifact_target.cjs |
Validates artifact destination overrides. |
setup/js/handle_agent_failure.cjs |
Handles invalid queue output during diagnostics. |
setup/js/git_patch_utils.cjs |
Scopes patch paths by claim. |
setup/js/generate_safe_outputs_tools.cjs |
Adds trusted claim-handle schema fields. |
setup/js/generate_git_bundle.cjs |
Scopes bundle paths by claim. |
setup/js/generate_aw_info.cjs |
Records subagent models and queue assignments. |
setup/js/fuzz_template_branch_harness.cjs |
Reuses the shared runtime shim. |
setup/js/fixtures/claude_ci_subagents.cjs |
Adds nested-agent regression fixtures. |
setup/js/fixtures/claude_ci_normalization.cjs |
Adds Claude normalization fixtures. |
setup/js/extract_inline_sub_agents.cjs |
Supports Pi and destination overrides. |
setup/js/extract_inline_skills.cjs |
Supports Pi and destination overrides. |
setup/js/extra_empty_commit.cjs |
Authorizes CI-triggering Git pushes. |
setup/js/daily_report_portfolio.cjs |
Defines rotating report plans and policy. |
setup/js/create_prompt.cjs |
Renders multi-claim assignment instructions. |
setup/js/create_project.cjs |
Adds API types and layout narrowing. |
setup/js/copilot_workflow_events.cjs |
Expands subagent lifecycle metadata. |
setup/js/copilot_session.cjs |
Preserves per-agent accounting snapshots. |
setup/js/copilot_sdk_session.cjs |
Corrects session documentation comments only. |
setup/js/copilot_routing_effort.cjs |
Reuses shared routing validation. |
setup/js/copilot_harness.cjs |
Uses shared endpoint-aware routing resolution. |
setup/js/constants.cjs |
Defines cache-restore search bounds. |
setup/js/collect_work_queue_intents.cjs |
Collects bounded intent files safely. |
setup/js/codex_session.cjs |
Normalizes reasoning-token accounting. |
setup/js/codex_harness.cjs |
Applies routed models and reasoning effort. |
setup/js/claude_harness.cjs |
Applies routed models and reasoning effort. |
setup/js/checkout_pr_branch.cjs |
Explicitly guards repository presence. |
setup/js/capture_work_queue_intent_origin.cjs |
Captures authenticated intent origins. |
setup/js/awf_model_routing.cjs |
Centralizes model and effort routing. |
setup/js/agent_session_render.cjs |
Respects explicit non-delta messages. |
setup/js/add_workflow_run_comment.cjs |
Documents the context parameter type. |
setup/js/actions_secret_masking.cjs |
Makes shim detection type-safe. |
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Comment on lines
+13
to
+15
| const stat = fs.lstatSync(filename); | ||
| if (!stat.isFile() || stat.size > MAX_INTENT_BYTES) throw new Error("Queue control delivery transport is not a bounded regular file"); | ||
| const bytes = fs.readFileSync(filename); |
Comment on lines
+43
to
+44
| if (args[i] === "--model") args.splice(i, 2); | ||
| else if (args[i].startsWith("--model=")) args.splice(i, 1); |
| if (typeof execute !== "function") throw new Error("Claim preparation script must provide a payload preparer"); | ||
| const messages = []; | ||
| for (const message of input.messages) { | ||
| const payload = await execute(message, new Map(), new Map()); |
Comment on lines
+85
to
+89
| for (const pool of Object.values(policy.pools)) | ||
| for (const profile of Object.values(pool.profiles)) { | ||
| const key = `${profile.workflow}\n${profile.ref}`; | ||
| if (seen.has(key)) continue; | ||
| await verifyWorkerRoute({ githubClient, owner, repo, profile }); |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated sync of actions from gh-aw at
v0.91.6.